{"id":"EUVD-2025-205410","enisaUuid":"971ef90c-ac36-337f-bee3-757350540742","description":"In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.","datePublished":"Dec 26, 2025, 2:14:52 AM","dateUpdated":"Dec 26, 2025, 6:57:56 PM","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://blog.gitea.com/release-of-1.22.5/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.5\nhttps://github.com/go-gitea/gitea/pull/32654\n","aliases":"CVE-2025-68940\nGHSA-rrcw-5rjv-vj26\n","assigner":"mitre","epss":0.27,"enisaIdProduct":[{"id":"f039baac-b1b3-3f7c-af42-b34685712f8d","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.22.5"}],"enisaIdVendor":[{"id":"33d554e0-7f55-3d3b-960e-6a56cd0de35f","vendor":{"name":"Gitea"}}],"enisaIdVulnerability":[{"id":"505a4ce8-27e8-3df1-a776-17927d8f5886","vulnerability":{"id":"GHSA-rrcw-5rjv-vj26","description":"Gitea doesn\u0027t adequately enforce branch deletion permissions after merging a pull request.","datePublished":"Dec 26, 2025, 3:30:15 AM","dateUpdated":"Dec 26, 2025, 7:12:24 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-68940\nhttps://github.com/go-gitea/gitea/pull/32654\nhttps://blog.gitea.com/release-of-1.22.5\nhttps://github.com/go-gitea/gitea\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.5\n","enisa_id":"EUVD-2025-205410\n","aliases":"GHSA-rrcw-5rjv-vj26\nCVE-2025-68940\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f16d4436-b778-372e-857a-a6a964251bd5","vulnerability":{"id":"CVE-2025-68940","description":"In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.","datePublished":"Dec 26, 2025, 2:14:52 AM","dateUpdated":"Dec 26, 2025, 6:57:56 PM","status":"PUBLISHED","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://blog.gitea.com/release-of-1.22.5/\nhttps://github.com/go-gitea/gitea/releases/tag/v1.22.5\nhttps://github.com/go-gitea/gitea/pull/32654\n","enisa_id":"EUVD-2025-205410\n","assigner":"mitre","epss":0.27,"dataProcessed":"Nov 1, 2026, 1:38:43 AM","vulnerabilityProduct":[{"id":"c045d5d7-ed22-3d2a-b6e7-0b4d3372a33b","product":{"name":"Gitea","vendor":{"name":"Gitea"}},"product_version":"0 \u003c1.22.5"}],"vulnerabilityVendor":[{"id":"a1b3c6af-eadc-31a0-acff-56c139e08863","vendor":{"name":"Gitea"}}]}}],"enisaIdAdvisory":[]}